Prisma Cloud by Palo Alto Networks vs Trellix Cloud Workload Security comparison

The compared Palo Alto Networks and Trellix solutions aren't in the same category. Palo Alto Networks is ranked #2 in CNAP , with an average rating of 8.5, and holds a 12.4% mindshare in the category. Trellix is ranked #25 in CWPP , and holds a 0.5% mindshare. Additionally, 98% of Palo Alto Networks users are willing to recommend the solution, compared to 100% of Trellix users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 11, 2026

Prisma Cloud by Palo Alto Networks and Trellix Cloud Workload Security compete in cloud security. Prisma Cloud is favorable for enterprises with diverse integration needs, while Trellix offers superior threat protection for advanced security requirements.

Features: Prisma Cloud provides comprehensive visibility, multi-cloud support, and robust governance across platforms, making it suitable for organizations with varied environments. Trellix Cloud Workload Security stands out with advanced threat detection, real-time risk analytics, and effective threat mitigation capabilities.

Ease of Deployment and Customer Service: Prisma Cloud is recognized for a straightforward setup and responsive customer support, enabling seamless integration. Trellix Cloud Workload Security, although more complex in deployment, is noted for providing in-depth technical assistance.

Pricing and ROI: Prisma Cloud offers a competitive pricing structure with strong ROI due to its extensive features and operational efficiency. Trellix Cloud Workload Security has a higher initial setup cost but provides substantial ROI through enhanced risk reduction.

To learn more, read our detailed Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security Report (Updated: March 2025).

Buyer's Guide

Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security

March 2025

Download the complete report

Helped 884,656 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
Product	Mindshare (%)
Prisma Cloud by Palo Alto Networks	12.4%
Wiz	17.4%
Microsoft Defender for Cloud	8.9%
Other	61.300000000000004%

Cloud-Native Application Protection Platforms (CNAPP)

Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
Product	Mindshare (%)
Trellix Cloud Workload Security	0.5%
Microsoft Defender for Cloud	16.5%
AWS GuardDuty	14.3%
Other	68.7%

Cloud Workload Protection Platforms (CWPP)

Featured Reviews

Satyavijay Chavan

Information Security Engineer at DataVigilant Infotech

Enables us to prioritize and effectively address critical security issues

Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.

Read full review

reviewer2776578

Cyber Security Architect at a comms service provider with 10,001+ employees

Image scanning has supported consistent security practices during cloud deployment

On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.

Read full review

Madan Mohan

Director Operations at SOFTPRO PLUS

Easy policy designing and highly scalable solution

The customers really want protection against unauthorized applications running on their servers. They should avoid installing any unknown source and use Trellix Cloud Workload Security for the best solution in workload security. It includes DNS with ransomware protection. With this, they can have complete protection for their servers. Additionally, any solution working with the database should implement change control. So, if any changes are made on the database side, they should be resolved and verified to ensure they are not made by any unknown source. This is the best solution we suggest to customers who want granular control to protect their servers. It's easy to deploy with a single agent. Overall, I would rate the solution a nine out of ten because policy designing is very easy too. And the manageability is very easy. You can easily manage it through EPO and deploy policies within five to ten minutes. No issues with that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"SentinelOne Singularity Cloud Security is excellent, and I highly recommend it."

"The real-time detection and response capabilities overall are great."

"The cloud misconfiguration feature and Offensive Security Engine, as well as their alerting process, are valuable."

"We use the infrastructure as code scanning, which is good."

"SentinelOne Singularity Cloud Security provides email alerts and ranks issues based on severity, such as high, critical, etc., that help us prioritize issues."

"Cloud Native Security is a tool that has good monitoring features."

"The features that stand out are threat detection using advanced artificial intelligence and machine learning, helping to identify and respond to threats in real-time."

"Cloud Native Security's best feature is its ability to identify hard-coded secrets during pull request reviews."

More SentinelOne Singularity Cloud Security pros

"Prisma Cloud's real-time detection and monitoring of our entire system is the most useful."

"Configuration monitoring and alerting is the most valuable feature; it happens at the cloud's speed, allowing our development team to respond quickly. If a configuration goes against our security best practices, we're alerted promptly and can act to resolve the issue. As cloud security staff, we're not staring at the cloud all the time, and we want to let the developers do their jobs so that our company is protected and work is proceeding within our security controls."

"Prisma was extremely comprehensive. It's easy to drill down to gather more information and keep going. It seemed like you could drill down forever to see what the vulnerability was linked to."

"Prisma Cloud's most valuable asset is its ability to provide detailed visibility into container activity."

"We haven't had an issue with the product for over a year."

"The most valuable feature of Prisma Cloud for our clients is CSPM, as it helps clients gain visibility into all the assets with their cloud providers."

"The most valuable feature is the continuous cloud compliance monitoring and alerting."

"We have standardized vendor process management, so we want to reduce multiple vendors. Prisma Cloud is part of Palo Alto. We use Palo Alto firewalls and other solutions. Prisma has many features that intelligently cover cloud security. One solution can cover runtime for EC2 systems, containers, and Fargate. We also have EKS/Kubernetes integration. So, whatever the cloud-native solution in Pfizer, we can use one solution to secure that."

More Prisma Cloud by Palo Alto Networks pros

"The discovery feature is the most valuable. After you integrate your cloud environment, maybe an Azure or AWS, or a private environment hosted on VMware, it automatically starts discovering the number of servers that are running on that cloud and the number of services that you have done. It is a beautiful feature because, from a security standpoint, it is difficult to identify which VM is compliant or not when you keep on provisioning a number of VMs in the cloud. It also checks for compliance. It checks whether a system is compliant and whether antivirus is installed on a VM. If an antivirus is installed, it checks whether the antivirus is updated to the latest signature package or not. All these things are beautifully done by McAfee Cloud Workload Security. For communicating with the McAfee server, you need to install an agent on the VM. McAfee Cloud Workload Security gives you a direct opportunity to install an agent on a Windows machine. If you have a Windows cloud, you can directly push that agent onto the VM through your McAfee portal. It provides you a single dashboard view of all servers present in the cloud. It shows the servers on which the antivirus is already installed as well as the servers for which the antivirus installation is still pending. This dashboard view is a much-needed thing. It also has a centralized management, which makes it easy to use."

"The most valuable feature is the application control."

Cons

"SentinelOne Singularity Cloud Security has limited legacy system support and may not fully support older operating systems or legacy environments."

"I'd like to see better onboarding documentation."

"SentinelOne Singularity Cloud Security is an excellent CSPM tool, but the CWPP features need to improve, and there is a scope for more application security posture management features. There aren't many ASPM solutions on the market, and existing ones are costly. I would like to see SentinelOne Singularity Cloud Security develop into a single pane of glass for ASPM, CSPM, and CWPP. Another feature I'd like to see is runtime protection."

"I would like to see the map feature improve. It's good, but it isn't fully developed. It lets us use custom resources and policies but does not allow us to perform some actions. I would also like more custom integration and runtime security for Kubernetes."

"There is one concern related to SentinelOne Singularity Cloud Security platform. They claim it as an AI-based integration that will provide runtime protection."

"For SentinelOne, improvements could be made in managing Internet dependency as cloud-based operations can pose challenges in environments with limited connectivity."

"There's an array of upcoming versions with numerous features to be incorporated into the roadmap. Customers particularly appreciate the service's emphasis on intensive security, especially the secret scanning aspect. During the proof of concept (POC) phase, the system is required to gather logs from the customer's environment. This process entails obtaining specific permissions, especially in terms of gateway access. While most permissions for POC are manageable, the need for various permissions may need improvement, especially in the context of security."

"SentinelOne Singularity Cloud Security filtering has some areas that cause problems, and to achieve single sign-on functionality, a break-glass feature, which is currently unavailable, is necessary."

More SentinelOne Singularity Cloud Security cons

"Sometimes we do get false alerts. That should be improved."

"When it comes to protecting the full cloud-native stack, it has the right breadth. They're covering all the topics I would care about, like container, cloud configuration, and serverless. There's one gap. There could be a better set of features around identity management—native AWS—IAM roles, and service account management. The depth in each of those areas varies a little bit. While they may have the breadth, I think there's still work to do in flushing out each of those feature sets."

"It would be nice Prisma Cloud merged its modules for CSPM and infrastructure as code. It would simplify the pricing and make it easier for customers to evaluate the solution because there are different modules, and you need to add it to your subscription separately."

"The solution does not currently support servers for GCP."

"The Fargate security microservice that's running doesn't support blocking features, which would be helpful. Another issue is the lifecycle. It isn't easy to upgrade if we have a console in Fargate."

"We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view."

"Prisma Cloud lags behind in terms of security automation capabilities."

"The first time I looked at Prisma Cloud, it took me a while to understand how to implement the integration or how to enable features by using the interface for integration. That portion can probably be improved."

More Prisma Cloud by Palo Alto Networks cons

"There is room for improvement in the pricing model."

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security. I wish McAfee would add a vulnerability assessment tool that will not only identify the vulnerability but will also be able to generate a report so that the required patching can be done for the servers. Currently, McAfee Cloud Workload Security only integrates with AWS and Azure. If it can also integrate with GCP, Alibaba, and other cloud services available in the market, it would be good because not all people are using Azure and AWS."

Pricing and Cost Advice

"The licensing is easy to understand and implement, with some flexibility to accommodate dynamic environments."

"It's a fair price for what you get. We are happy with the price as it stands."

"The features included in PingSafe justify its price point."

"Singularity Cloud Workload Security's pricing is good."

"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."

"The pricing tends to be high."

"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."

"Its pricing is constant. It has been constant over the previous year, so I am happy with it. However, price distribution can be better explained. That is the only area I am worried about. Otherwise, the pricing is very reasonable."

More SentinelOne Singularity Cloud Security pricing and cost advice

"It is fairly priced. However, its price can be better so that small banks or small organizations can afford it and adopt it to secure their environment and data."

"Its licensing cost depends on the type of license such as the business license or the enterprise license. The enterprise license is costlier than the business license, but we get more visibility and more modules. If you have a multi-cloud environment and subscribe to each cloud's native CSPM tool, it is costly. If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud. The cost of Prisma Cloud is less than the cost of subscribing to the CSPM tool of each cloud provider. This is where Prisma Cloud can save costs."

"Prisma Cloud is remarkably expensive."

"Prisma Cloud is a value-back cloud-managed solution; cloud-native solutions are quite expensive."

"The cost was not on the higher side. Overall, the cost gets recovered with its implementation."

"Prisma Cloud is cost-efficient, but the credits are on the higher end."

"One thing we're very pleased about is how the licensing model for Prisma is based on work resources. You buy a certain amount of work resources and then, as they enable new capabilities within Prisma, it just takes those work resource units and applies them to new features. This enables us to test and use the new features without having to go back and ask for and procure a whole new product, which could require going through weeks, and maybe months, of a procurement process."

"Our licensing fees are $18,000 USD per year."

More Prisma Cloud by Palo Alto Networks pricing and cost advice

"It is not an expensive product. I am in the Indian market, and it is one of the most reliable and cost-effective solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.

See recommendations

884,656 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

12%

Manufacturing Company

10%

Government

Financial Services Firm

15%

Computer Software Company

10%

Manufacturing Company

Insurance Company

Comms Service Provider

20%

Government

12%

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	48
Midsize Enterprise	22
Large Enterprise	55

By reviewers
Company Size	Count
Small Business	37
Midsize Enterprise	22
Large Enterprise	56

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

See all answers

What is your experience regarding pricing and costs for PingSafe?

Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.

See all answers

What needs improvement with PingSafe?

I do not see room for improvement in SentinelOne Singularity Cloud Security. In the future, I would like to see the i...

See all answers

What is your primary use case for Prisma Cloud by Palo Alto Networks?

Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.

See all answers

What Cloud-Native Application Protection Platform do you recommend?

We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We...

See all answers

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...

See all answers

Ask a question

Earn 20 points

Comparisons

Wiz vs SentinelOne Singularity Cloud Security

Compared 10% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 5% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 4% of the time

FortiCNAPP vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Wiz vs Prisma Cloud by Palo Alto Networks

Compared 9% of the time

Check Point CloudGuard CNAPP vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

Cyera vs Prisma Cloud by Palo Alto Networks

Compared 7% of the time

Microsoft Defender for Cloud vs Prisma Cloud by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon Cloud Security vs Prisma Cloud by Palo Alto Networks

Compared 4% of the time

More Prisma Cloud by Palo Alto Networks Competitors

Microsoft Defender for Cloud vs Trellix Cloud Workload Security

Compared 29% of the time

TrendAI Vision One – Cloud Security vs Trellix Cloud Workload Security

Compared 25% of the time

AWS GuardDuty vs Trellix Cloud Workload Security

Compared 20% of the time

FortiCNAPP vs Trellix Cloud Workload Security

Compared 17% of the time

Aqua Cloud Security Platform vs Trellix Cloud Workload Security

Compared 10% of the time

More Trellix Cloud Workload Security Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Cloud Security

February 2026

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Buyer's Guide

Prisma Cloud by Palo Alto Networks

February 2026

Prisma Cloud by Palo Alto Networks report

Download Prisma Cloud by Palo Alto Networks product report

Buyer's Guide

Cloud Workload Protection Platforms (CWPP)

February 2026

Download Trellix Cloud Workload Security product report

Also Known As

PingSafe

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto

McAfee Cloud Workload Security

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

Prisma Cloud by Palo Alto Networks provides comprehensive cloud-native security solutions. It covers dynamic workload identity, automated forensics, and multi-cloud protection, ensuring robust security across diverse cloud platforms.

Prisma Cloud delivers advanced capabilities for managing cloud security across AWS, Azure, and GCP platforms. It offers dynamic workload identity creation, real-time monitoring, and seamless integration into CI/CD pipelines. With automation, centralized dashboards, and enhanced visibility, users effectively manage security misconfigurations and vulnerabilities. While optimizing cloud environments through runtime protection and compliance, Prisma Cloud faces challenges with its navigation, pricing, and limited automation capabilities. Users seek improvements in API security, role-based access controls, and documentation quality, emphasizing the need for enhanced customization and reporting features.

What are the important features of Prisma Cloud?

Dynamic Workload Identity: Enables unique workload identities for security purposes.
Automated Forensics: Offers detailed insights into threats and incidents automatically.
Runtime Protection: Provides ongoing detection and blocking of suspicious activities.
Multi-Cloud Security: Protects environments on AWS, Azure, and GCP simultaneously.
Compliance Management: Assists in meeting regulatory standards across cloud platforms.

What benefits or ROI should users consider in reviews?

Enhanced Security Posture: Strengthens cloud defense lines with proactive monitoring.
Centralized Dashboard: Offers unified oversight of multiple cloud environments.
Efficient Misconfiguration Handling: Quickly identifies and addresses security lapses.
Seamless CI/CD Integration: Integrates security within development workflows.
Improved Visibility: Provides transparent insights into security operations and alerts.

Industries like finance and telecom rely on Prisma Cloud for managing cloud security posture and container security. Teams utilize its capabilities across hybrid and multi-cloud settings to ensure compliance and robust threat protection. Features like misconfiguration detection and runtime monitoring are critical in promoting security objectives in these sectors.

Palo Alto Networks

Trellix Cloud Workload Security is a comprehensive security solution designed to protect cloud workloads from advanced threats. It provides real-time visibility and control over cloud workloads, enabling organizations to quickly detect and respond to threats.

The most useful functionality of the solution includes automated threat detection, continuous compliance monitoring, and workload protection. With these features, organizations can ensure their cloud workloads are secure and compliant with industry regulations. Trellix Cloud Workload Security helps organizations reduce the risk of data breaches, protect sensitive data, and ensure compliance with regulatory requirements.

Trellix

Sample Customers

Information Not Available

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America

Information Not Available

Buyer's Guide

Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security

March 2025

Free Report: Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security

Find out what your peers are saying about Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security and other solutions. Updated: March 2025.

DOWNLOAD NOW

884,656 professionals have used our research since 2012.

See our Prisma Cloud by Palo Alto Networks vs. Trellix Cloud Workload Security report.

We monitor all Cloud-Native Application Protection Platforms (CNAPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.